@ran-sh/dsh-crew 2.2.0 → 2.2.1

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-crew",
-  "version": "2.2.0",
+  "version": "2.2.1",
   "description": "Dispatch subtasks to DeepSeek Harness (DSH) agents as native subagents with live progress",
   "author": {
     "name": "ZSeven-W"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ran-sh/dsh-crew",
-  "version": "2.2.0",
+  "version": "2.2.1",
   "type": "module",
   "main": "./src/hub/entry.mjs",
   "bin": {

package/scripts/setup.mjs

@@ -16,7 +16,6 @@ import {
   ensureCrewDshRuntime,
   ensureCrewPluginRegistration,
   resolveDshCli,
-  runResolvedDsh,
   describeDshCli,
   removeCrewPluginRegistration,
   TARGET_DSH_VERSION,
@@ -81,11 +80,12 @@ function run(cmd, args, opts = {}) {
  * may use `npx -y` to fetch DSH, while status/uninstall probes never trigger a
  * network download merely by checking availability.
  *
- * The returned descriptor is the CLI base only; every invocation is built by
- * `runDsh` with the dedicated dsh-crew profile and the Crew DSH_HOME in the
- * child process environment. The official ``web`` profile is never a target.
+ * The returned descriptor is the CLI base only, reported to the operator as
+ * `description`; the dedicated dsh-crew profile and the Crew-owned DSH_HOME
+ * are supplied by the install flow. The official ``web`` profile is never a
+ * target.
  */
-export function detectDsh({ allowDownload = false, home = homedir(), includeCompatibility = true } = {}) {
+function detectDsh({ allowDownload = false, home = homedir(), includeCompatibility = true } = {}) {
   const resolved = resolveDshCli({
     home,
     allowDownload,
@@ -95,18 +95,6 @@ export function detectDsh({ allowDownload = false, home = homedir(), includeComp
   return { ...resolved, cli: resolved.command, description: describeDshCli(resolved) };
 }
 
-/**
- * Run a DSH plugin command against the dedicated Crew profile under the
- * Crew-owned DSH_HOME. `home` is the "user home" base used to derive that
- * isolated home, so tests can point it at a disposable root.
- */
-export function runDsh(dsh, args, { home = homedir() } = {}) {
-  const resolved = dsh?.command
-    ? dsh
-    : { kind: dsh?.kind ?? 'legacy', command: dsh?.cli ?? dsh, args: [] };
-  return runResolvedDsh(resolved, ['plugin', '--profile', CREW_PROFILE_NAME, ...args], { home });
-}
-
 export function readPackageName(root = ROOT) {
   try { return JSON.parse(readFileSync(join(root, 'package.json'), 'utf8')).name; } catch { return null; }
 }
@@ -117,20 +105,11 @@ export function checkRoot(root = ROOT) {
     && existsSync(join(root, 'cordis.patch.yml'));
 }
 
-export function depsPresent(root = ROOT) {
+function depsPresent(root = ROOT) {
   return existsSync(join(root, 'node_modules', '@modelcontextprotocol', 'sdk'))
     && existsSync(join(root, 'node_modules', '.bin', 'tsdown'));
 }
 
-export function profileHasPackage(home, name, profileRoot = crewProfileDir({ home })) {
-  const pkgFile = join(profileRoot, 'package.json');
-  if (!existsSync(pkgFile)) return false;
-  try {
-    const pkg = JSON.parse(readFileSync(pkgFile, 'utf8'));
-    return Boolean(pkg.dependencies?.[name]) || Boolean((pkg.dsh?.profile?.bundles ?? []).includes(name));
-  } catch { return false; }
-}
-
 function mark(log, ok, text) {
   log(`${ok ? '✓' : '✗'} ${text}`);
   return ok;

package/scripts/verify-npm-install.mjs

@@ -24,7 +24,7 @@ const DSH_PACKAGE = '@deepseek-ai/dsh';
 const DSH_PREFIX = '@deepseek-ai/dsh-';
 const MAX_DIRECT_PEERS = 64;
 
-export function resolveNpmInvocation({
+function resolveNpmInvocation({
   platform = process.platform,
   nodePath = process.execPath,
   fileExists = existsSync,
@@ -144,7 +144,7 @@ function manifestUrl(registryUrl, name, version) {
   return `${registryUrl.replace(/\/+$/, '')}/${encodedName}/${encodeURIComponent(version)}`;
 }
 
-export async function fetchPublicManifest(name, version, {
+async function fetchPublicManifest(name, version, {
   registryUrl = registry,
   fetchImpl = globalThis.fetch,
 } = {}) {

package/src/adaptive-routing.mjs

@@ -5,8 +5,8 @@
 // caller may record only outcomes Crew already observed, and routing decisions
 // expose bounded evidence suitable for model-selection trace metadata.
 
-export const ADAPTIVE_ROUTING_VERSION = 1;
-export const ADAPTIVE_ROUTING_DEFAULTS = Object.freeze({
+const ADAPTIVE_ROUTING_VERSION = 1;
+const ADAPTIVE_ROUTING_DEFAULTS = Object.freeze({
   enabled: false,
   window_size: 8,
   min_samples: 2,

package/src/ci-evidence.mjs

@@ -29,7 +29,7 @@
 // one; nothing here reads credentials from disk, and the value is never logged,
 // returned, or included in an evidence record.
 
-export const CI_EVIDENCE_REPO = 'Ran-sh/dsh-crew';
+const CI_EVIDENCE_REPO = 'Ran-sh/dsh-crew';
 
 // The row each CI job validates. A platform with no job in the workflow cannot
 // be evidenced by any run, so `macos_smoke` is deliberately absent rather than

package/src/client/quick-panel.tsx

@@ -9,7 +9,6 @@ import { PanelHeader, PanelStyles } from './panel-chrome';
 // (/_dsh/dsh-crew/quick-config, /quick-status). Runtime maintenance stays on 3210.
 
 const API = '/_dsh/dsh-crew';
-const CREW_CONTROL_PLANE_URL = 'http://127.0.0.1:3210/';
 const FULL = 'http://127.0.0.1:3210/';
 
 type ModelEntry = { provider: string; model: string };

package/src/credential-lifecycle.mjs

@@ -4,9 +4,6 @@
 
 import { createHash, randomUUID } from 'node:crypto';
 
-export const CREDENTIAL_PURGE_STATES = Object.freeze([
-  'PLANNED', 'REFERENCE_RECHECKED', 'PURGE_PENDING_CONFIRMATION', 'PURGED', 'VERIFIED', 'FAILED',
-]);
 const ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,191}$/;
 const REVISION_PATTERN = /^[a-f0-9]{64}$/;
 

package/src/credential-purge-state.mjs

@@ -36,7 +36,7 @@ export function markCredentialPurged(input, plan) {
   };
 }
 
-export function markCredentialPurgeUnverified(input, plan) {
+function markCredentialPurgeUnverified(input, plan) {
   const state = normalizeCredentialPurgeState(input);
   if (!validId(plan?.reference_id) || !validId(plan?.plan_id)) return state;
   const purged = { ...state.purged };
@@ -53,7 +53,3 @@ export function recordCredentialPurgeOutcome(input, plan, result) {
   if (result?.state === 'PURGED') return markCredentialPurgeUnverified(input, plan);
   return normalizeCredentialPurgeState(input);
 }
-
-export function isCredentialPurged(input, referenceId) {
-  return Object.prototype.hasOwnProperty.call(normalizeCredentialPurgeState(input).purged, referenceId);
-}

package/src/credential-reference.mjs

@@ -28,11 +28,3 @@ export function classifyCredentialReference(value, { kind = 'env' } = {}) {
     : HANDLE_REFERENCE.test(raw) && !SECRET_LIKE.test(raw) && !EMBEDDED_SECRET.test(raw);
   return { present: true, value: valid ? raw : null, redacted: !valid };
 }
-
-export function sanitizeCredentialReference(value, options = {}) {
-  return classifyCredentialReference(value, options).value;
-}
-
-export function hasCredentialReference(value, options = {}) {
-  return classifyCredentialReference(value, options).present;
-}

package/src/crew-workspaces.mjs

@@ -32,7 +32,7 @@ import { acquireWorkspaceLock, DEFAULT_LOCK_WAIT_MS } from './workspace-lock.mjs
 
 export const CREW_WORKSPACE_WORKER = 'dsh-crew-worker';
 export const CREW_WORKSPACE_REVIEW = 'dsh-crew-review';
-export const CREW_WORKSPACE_NAMES = Object.freeze([CREW_WORKSPACE_WORKER, CREW_WORKSPACE_REVIEW]);
+const CREW_WORKSPACE_NAMES = Object.freeze([CREW_WORKSPACE_WORKER, CREW_WORKSPACE_REVIEW]);
 export const WORKSPACE_CONFLICT = 'WORKSPACE_CONFLICT';
 
 /** The workspace a role runs in. Only the reviewer is separated out. */

package/src/delivery.mjs

@@ -11,7 +11,7 @@
 
 export const DELIVERY_SECTIONS = ['Diff', 'Tests', 'Risks'];
 export const OPTIONAL_DELIVERY_SECTIONS = ['Unverified'];
-export const ALL_DELIVERY_SECTIONS = [...DELIVERY_SECTIONS, ...OPTIONAL_DELIVERY_SECTIONS];
+const ALL_DELIVERY_SECTIONS = [...DELIVERY_SECTIONS, ...OPTIONAL_DELIVERY_SECTIONS];
 
 export const REVIEW_SECTIONS = ['Review Findings', 'Evidence', 'Risks', 'Verdict'];
 
@@ -129,7 +129,7 @@ export function appendDeliveryInstructions(task, { tier, isReview } = {}) {
  * visible evidence. Two parsers gave two answers about one section; there is now
  * one, and it lives here.
  */
-export function parseTestRow(line) {
+function parseTestRow(line) {
   const normalized = String(line ?? '')
     .replace(/^\s*[-*+]\s+/, '')
     .replace(/^\|/, '')

package/src/dsh-cli-runtime.mjs

@@ -35,7 +35,7 @@ import {
 // Re-exported so existing importers keep working while the cohort value now
 // lives in exactly one place (src/dsh-cohort.mjs).
 export { DSH_CLI_PACKAGE, TARGET_DSH_VERSION, TARGET_DSH_SPEC };
-export const CREW_DSH_RUNTIME_DIRNAME = 'runtime';
+const CREW_DSH_RUNTIME_DIRNAME = 'runtime';
 const CREW_PROFILE_DEFAULT_BUNDLES = ['@deepseek-ai/dsh-base', '@deepseek-ai/dsh-web-app'];
 const PROFILE_PATCH_TEMPLATE = '[]\n';
 const PROFILE_PNPM_WORKSPACE = 'packages:\n  - .\n\nnodeLinker: hoisted\nautoInstallPeers: false\n';
@@ -73,11 +73,6 @@ export function crewDshRuntimeVersionDir({ home = homedir(), version = TARGET_DS
   return join(crewDshHome({ home }), `runtime-${version}`);
 }
 
-export function crewDshRuntimeEntry({ home = homedir(), platform = process.platform } = {}) {
-  const suffix = platform === 'win32' ? '.cmd' : '';
-  return join(crewDshRuntimeRoot({ home }), 'node_modules', '.bin', `dsh${suffix}`);
-}
-
 export function crewDshRuntimeModule({ home = homedir() } = {}) {
   return join(crewDshRuntimeRoot({ home }), 'node_modules', '@deepseek-ai', 'dsh', 'lib', 'bin.js');
 }
@@ -736,35 +731,36 @@ export async function restoreRetainedRuntime({
 }
 
 // GC retained runtimes that no release pins. A retained cohort is needed only
-// while some managed release (current or retained) declares it as its exact
-// @deepseek-ai/dsh dependency. Best-effort; never throws.
-export function gcRetainedRuntimes({ home = homedir(), releases = [], log = () => {} } = {}) {
+// while some managed release resolves to it, so the caller passes the resolved
+// cohort versions (see resolveReleaseCohort: manifest pin, then the
+// release-cohort.json sidecar). Best-effort; never throws — a root that is
+// missing, unreadable or not a directory prunes nothing rather than failing
+// the update that just committed.
+export function gcRetainedRuntimes({ home = homedir(), cohorts = [], log = () => {} } = {}) {
   const root = retainedRuntimesRoot({ home });
-  if (!existsSync(root)) return [];
-  const needed = new Set();
-  for (const release of releases) {
-    const spec = payloadDshSpec(release);
-    if (spec && /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(spec)) needed.add(spec);
-  }
+  const needed = new Set(cohorts.filter((spec) => typeof spec === 'string' && EXACT_COHORT_RE.test(spec)));
+  let names;
+  try { names = readdirSync(root); } catch { return []; }
   const removed = [];
-  for (const name of readdirSync(root)) {
+  for (const name of names) {
+    if (needed.has(name)) continue;
     const dir = join(root, name);
-    if (!needed.has(name)) {
-      try { rmSync(dir, { recursive: true, force: true }); removed.push(name); } catch { /* best effort */ }
-    }
+    try { rmSync(dir, { recursive: true, force: true }); removed.push(name); } catch { /* best effort */ }
   }
   return removed;
 }
 
+const EXACT_COHORT_RE = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
+
 // Read the exact @deepseek-ai/dsh pin from a payload manifest (dependencies
 // first, then peerDependencies). Exact pins only: a range or absence yields
 // null so callers fail closed instead of guessing a cohort.
 function payloadDshSpec(manifest) {
   if (!manifest || typeof manifest !== 'object') return null;
   const direct = manifest.dependencies?.['@deepseek-ai/dsh'];
-  if (typeof direct === 'string' && /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(direct)) return direct;
+  if (typeof direct === 'string' && EXACT_COHORT_RE.test(direct)) return direct;
   const peer = manifest.peerDependencies?.['@deepseek-ai/dsh'];
-  if (typeof peer === 'string' && /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(peer)) return peer;
+  if (typeof peer === 'string' && EXACT_COHORT_RE.test(peer)) return peer;
   return null;
 }
 
@@ -964,7 +960,7 @@ function ensureDirectoryLink(linkPath, targetRoot) {
  * command. The profile manifest and one loader-visible directory link are the
  * only state changed; no dependency resolution or policy bypass is attempted.
  */
-export function ensurePluginRegistration({
+function ensurePluginRegistration({
   profileRoot,
   root,
   name,

package/src/extension-contract.mjs

@@ -4,7 +4,7 @@
 
 import { validateModelCallabilityV2 } from './model-callability-contract.mjs';
 
-export const EXTENSION_CONTRACT_SCHEMA_VERSION = 1;
+const EXTENSION_CONTRACT_SCHEMA_VERSION = 1;
 
 function row(matrix, id) {
   return Array.isArray(matrix?.rows) ? matrix.rows.find((entry) => entry?.id === id) : undefined;

package/src/failure-classification.mjs

@@ -3,16 +3,6 @@
 // Classification consumes structured status/codes/outcomes only. It never
 // parses raw exception text, provider responses, credentials, quotas or logs.
 
-export const FAILURE_CATEGORIES = Object.freeze([
-  'none',
-  'policy',
-  'compatibility',
-  'provider',
-  'runtime',
-  'verification',
-  'cancelled',
-]);
-
 export const FAILURE_REASON_CODES = Object.freeze({
   NONE: 'NONE',
   CANCELLED: 'CANCELLED',

package/src/hub/entry.mjs

@@ -68,7 +68,7 @@ export function recordAdaptiveJobOutcome(job, store = getProcessAdaptiveHealthSt
  * a chained promise preserves all legacy completion/waiter behavior and runs
  * this observer only after the Hub's own finalizer populated endedAt/status.
  */
-export function installAdaptiveHealthObserver() {
+function installAdaptiveHealthObserver() {
   if (WorkerRegistry.prototype[ADAPTIVE_OBSERVER_INSTALLED] === true) return false;
   const originalSpawn = WorkerRegistry.prototype.spawn;
   Object.defineProperty(WorkerRegistry.prototype, ADAPTIVE_OBSERVER_INSTALLED, {

package/src/hub/index.mjs

@@ -119,7 +119,6 @@ export const QUICK_CONFIG_KEYS = Object.freeze([
 const LEGACY_TIER_MODELS = { flash: 'deepseek-v4-flash', pro: 'deepseek-v4-pro' };
 // Local copy (the hub must not import jobs.mjs, which pulls the DSH SDK into
 // the profile realm): a valid dispatch role set.
-const ROLES = { worker: true, reviewer: true };
 const CONFIG_DIR = join(homedir(), '.config', 'dsh-crew');
 const CREDENTIAL_PURGE_STATE_FILE = join(CONFIG_DIR, 'credential-purge-lifecycle.json');
 const RECOVERY_ACTION_PATTERN = /^[a-f0-9]{32}$/u;

package/src/i18n.mjs

@@ -13,7 +13,5 @@ export function setLang(lang) {
   return LANG;
 }
 
-export function getLang() { return LANG; }
-
 /** Pick the string for the active locale. Both branches are cheap literals. */
 export function tr(zh, en) { return LANG === 'zh' ? zh : en; }

package/src/install/crew-skill.mjs

@@ -42,7 +42,7 @@ export function crewSkillFiles({ home = homedir(), env = process.env } = {}) {
 }
 
 /** The skill template shipped in the payload. */
-export function crewSkillSource({ root }) {
+function crewSkillSource({ root }) {
   return join(root, 'skills', CREW_SKILL_NAME, 'SKILL.md');
 }
 

package/src/install/install-legacy.mjs

@@ -57,7 +57,7 @@ const REGEX_MAY_FOLLOW = new Set([
  * from the raw text, so a keyword inside a comment or a string is not a
  * declaration and a quote inside a regex is not a string.
  */
-export function tokenizeModuleSource(source) {
+function tokenizeModuleSource(source) {
   const tokens = [];
   const text = String(source ?? '');
   let i = 0;
@@ -748,7 +748,7 @@ export function pickClaudeCommand(candidates, { platform = process.platform } =
     ?? list[0];
 }
 
-export function resolveClaudeCommand({ platform = process.platform } = {}) {
+function resolveClaudeCommand({ platform = process.platform } = {}) {
   const probe = spawnSync(platform === 'win32' ? 'where' : 'which', ['claude'], {
     encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'],
   });
@@ -1019,7 +1019,7 @@ export async function installClaudeCode({ home = homedir(), statusline = false,
 }
 
 // Keep CLI transaction ordering testable without changing the operator's home.
-export async function refreshClaudePlugin({ home, root, actions = [], claudeCommand, runStep = runClaudeStep }) {
+async function refreshClaudePlugin({ home, root, actions = [], claudeCommand, runStep = runClaudeStep }) {
   // Each step runs to completion — including ending the whole process tree on a
   // timeout — before the next one starts, and the settle window is the widest any
   // step asks for. Two things this replaces: an `uninstall` left running past its